5.6Mittel
CVE-2026-15030
Beschreibung
Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation. Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
Schwachstellentyp (CWE):
CWE-125
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| ASUS | Business Manager | through v3.0.38.0 | |
| ASUS | System Control Interface | before v1.1.40.0 | |
| ASUS | System Control Interface v3 | before v3.1.65.0 |